What is a VPAT? It stands for Voluntary Product Accessibility Template, and it is the document that tells government agencies, enterprise buyers, and legal counsel exactly how accessible your digital product or website is. If you have ever responded to a government contract, received a procurement request from a university, or faced an ADA legal situation, you have probably been asked for one.
This guide explains what a VPAT actually is, who needs one, what is in it, and how to get yours done.
What Is a VPAT?
A VPAT is a standardized document that describes how well a website, software application, or digital product conforms to accessibility standards. Think of it as a specification sheet, but instead of listing features like processing speed or storage, it lists how the product performs against specific WCAG (Web Content Accessibility Guidelines) and Section 508 requirements.
The template was created by the Information Technology Industry Council (ITI) specifically so government agencies could evaluate the accessibility of technology products before buying them. It has since become the standard format for accessibility disclosure across government, enterprise, and regulated industries worldwide.
The current version is VPAT 2.5, updated in April 2025.
Why Does the “V” Stand for Voluntary if I am Required to Have One?
The “voluntary” in VPAT refers to the template format itself, not whether you need to complete one. The ITI made the template freely available, and its use is voluntary in the sense that no one is forced to use that specific form. But if you want to sell to the U.S. federal government or other entities governed by Section 508, you are required to submit an Accessibility Conformance Report, and the VPAT is the most widely accepted way to do that.
For private sector businesses, a VPAT is not legally required. But having one can significantly strengthen your position if you face an ADA legal situation.
Who Needs a VPAT?
You likely need a VPAT if you:
Sell software, apps, or digital services to the U.S. federal government: Section 508 of the Rehabilitation Act requires federal agencies to buy accessible technology. To prove your product is accessible, you need to submit an ACR, typically completed using the VPAT template. Without it, your product may be automatically disqualified from consideration.
Sell to state or local governments: The DOJ’s 2024 update to ADA Title II explicitly requires state and local governments serving populations over 50,000 to meet WCAG 2.1 AA standards by April 2026. Procurement teams at these agencies now routinely request VPATs as part of their purchasing process.
Sell to universities, nonprofits, or organizations that receive federal funding: These entities fall under Section 508 and often require VPAT documentation from their vendors.
Are responding to an RFP (Request for Proposal: Many enterprise and public-sector RFPs include accessibility documentation requirements. A missing VPAT can disqualify you from a deal regardless of how strong your product is otherwise.
Have received an ADA demand letter or are involved in ADA litigation: A VPAT does not guarantee legal protection, but it is one of several documents (alongside an audit report and accessibility statement) that demonstrates good-faith compliance effort. Courts look at that.
You want to demonstrate accessibility maturity to larger clients: Even if no one has asked for a VPAT yet, having one ready signals that you take accessibility seriously. It builds trust with enterprise buyers who have their own compliance obligations.
You probably do not need a VPAT if:
You are a small business with a standard website, no government or enterprise clients, and no active ADA legal situation. In that case, an audit report and accessibility statement are more relevant for your situation. A VPAT is primarily a procurement and enterprise document.
What Is Inside a VPAT?
A completed VPAT (technically called an ACR once filled out) contains the following sections:
Product information: Name, version, release date, and a description of what the product does.
Contact information: Who prepared the report, when, and how to reach them with questions.
Evaluation methods: How the product was tested (automated tools, manual testing, assistive technology testing, user testing, or a combination).
Applicable standards: Which standards the product was evaluated against (WCAG 2.x, Section 508, EN 301 549, or a combination depending on which VPAT edition was used).
Conformance tables: The main body of the document. Each row is a specific WCAG success criterion or Section 508 requirement. For each one, the report states one of four conformance levels:
- Supports: The product fully meets this requirement
- Partially Supports: The product meets it in some cases but not all
- Does Not Support: The product does not meet this requirement
- Not Applicable: This requirement does not apply to this product
Remarks and explanations: For anything marked as partial support or no support, this column explains what the limitation is and whether there is a workaround.
A well-done VPAT is transparent about what works and what does not. A VPAT that claims “Supports” for every single criterion raises red flags with experienced procurement teams. Honest documentation of partial support, with a remediation plan, is more credible.
What Is the Difference between a VPAT and ACR?
These two refer to the same document at different stages.
The VPAT is the blank template. Once you fill it out for a specific product, it becomes an ACR (Accessibility Conformance Report). Most people in the industry use “VPAT” to mean both the template and the completed report. Procurement teams who ask for a “VPAT” almost always mean they want your completed ACR.
You may also hear the term GPAT (Government Product Accessibility Template), which is an older term for the same document. VPAT is now the standard name.
The Four VPAT Editions
Different buyers in different markets require conformance with different standards. The ITI created four VPAT editions to cover the major frameworks:
| Edition | Standards Covered | Use When |
| VPAT WCAG | WCAG 2.x | Private sector, international buyers who reference WCAG |
| VPAT Section 508 | Section 508 (U.S. federal) | Selling to U.S. federal agencies |
| VPAT EU | EN 301 549 | Selling in the European Union (relevant post-EAA 2025) |
| VPAT INT | All three combined | International or multi-market products |
The current version of all four editions is VPAT 2.5, updated in April 2025.
If you are unsure which edition to use, VPAT INT covers all frameworks and is the safest choice for companies with any international exposure or enterprise clients.
How to Get a VPAT Done
Option 1: Have an Expert Do it for You
This is the recommended approach for most businesses. A VPAT completed by certified accessibility specialists carries more weight than a self-assessed one, because the methodology is documented and the findings are defensible. An expert will:
- Conduct a thorough audit of your product against the relevant standards
- Document conformance levels with evidence for each criterion
- Provide commentary on partial and non-supported items
- Flag issues you may not have known existed
The resulting VPAT is accurate, defensible, and ready for enterprise or government procurement.
Option 2: Generate it Automatically
ADAcertify generates VPAT reports in one click from your site’s accessibility data. This is a fast, cost-effective way to get a VPAT started, especially for websites. For complex software products or applications requiring human-verified testing, supplement the automated VPAT with an expert audit.
Option 3: Do it Yourself
The VPAT template is available free from the ITI website (itic.org). You can download the template in Word or Excel format and fill it out manually. This requires detailed knowledge of your product’s accessibility features and the ability to evaluate each WCAG criterion accurately.
Self-assessed VPATs are accepted in some contexts, but they carry less weight with sophisticated buyers who know what a credible VPAT looks like. If your VPAT will be used in a government contract or a legal situation, professional preparation is worth it.
Can I Write My Own VPAT?
You can. The template is free and publicly available. But there are two things to know.
First, writing an accurate VPAT requires you to evaluate your product against every applicable WCAG success criterion and Section 508 provision. That is a detailed technical exercise. Guessing or marking everything as “Supports” without testing is not just inaccurate; it can create legal risk if a buyer relies on your report and later discovers the claims were wrong.
Second, buyers with experience reviewing VPATs can usually tell a rushed self-assessment from a properly tested one. If the VPAT will be used in a high-stakes context (a large government contract, litigation, or an enterprise deal), professional preparation will give you a stronger document.
How ADAcertify Generates Your VPAT
ADAcertify is one of the only ADA compliance platforms that generates VPAT reports directly from your dashboard in one click. The process works like this:
- ADAcertify’s AI scanner audits your site and documents WCAG conformance across your pages
- You generate the VPAT report from your dashboard
- The report is formatted to the VPAT standard and ready for procurement, legal, or compliance use
- If you need a more detailed, expert-verified VPAT, ADAcertify’s certified accessibility specialists conduct a manual audit and complete the report with full testing documentation
This means you get your VPAT done fast, without having to hire a separate accessibility consultant or fill out a 30-page template manually.
Start a free trial and generate your VPAT today.
If you are selling to government agencies, responding to an enterprise RFP, or building a documented compliance record to protect your business, a VPAT is the document that backs up your claims. It is not a certification, but it is the closest thing the accessibility world has to a standardized proof of compliance. Get it done before someone asks for it.
